Harden containerized workloads and Kubernetes environments by establishing guardrails for cluster configuration, workload identity, network policies, container images, and runtime security.
Participate in architecture and design reviews and threat modeling for new and changing systems.
Design secure integrations among cloud and data platforms, including identity federation, private connectivity, data sharing, masking, classification, and access controls.
Build security controls into source-code repositories, automated delivery pipelines, and infrastructure-as-code through automated scanning, policy-as-code, and guardrails.
Assess new cloud services and platform capabilities, including data, analytics, and artificial intelligence services, and recommend controls before broad adoption.
Collaborate with platform engineering, cloud operations, data engineering, networking, and security teams to ensure solutions are secure, compliant, and compatible with existing infrastructure.
Create documentation that helps engineering teams apply security guidance effectively.
Automate security controls through scripting or programming and contribute to secure development and operations practices.
Translate security frameworks and standards into clear, actionable guidance for engineering, data, and operations teams.
Required Qualifications
At least seven years of experience in security engineering, security architecture, or cloud engineering with a security focus, including extensive hands-on experience with a leading cloud platform.
Experience designing and reviewing secure cloud architectures, including threat modeling and security design reviews.
Strong understanding of cloud security principles, identity and access management, network security, and secure defaults for cloud and data platforms.
Strong hands-on experience securing cloud environments, including identity and access management, organizational controls, virtual networking, key management, container orchestration, audit logging, security monitoring, and threat detection.
Hands-on experience securing Kubernetes workloads, including cluster hardening, role-based access control, workload identity, network policies, and admission control.
Experience with cloud security tooling, including posture management, attack path analysis, and routing findings to engineering teams.
Proficiency with infrastructure-as-code and at least one scripting or programming language, such as Python, TypeScript, Go, or a similar language, for security automation.
Working knowledge of security frameworks and benchmarks, including NIST CSF, CIS Benchmarks, and ISO 27001.
Bachelor's degree or equivalent practical experience.
A concentration in computer science, software engineering, information technology, cybersecurity, or a similar discipline is strongly preferred.
Strong problem-solving skills, with a demonstrated ability to analyze complex systems and identify risk.
Strong interpersonal and communication skills, including the ability to explain complex topics to technical and non-technical audiences.
Proven ability to collaborate across multiple technology and project teams.
Ability to communicate clearly through presentations and written documentation.
Ability to prioritize and deliver work across competing demands.
Commitment to ongoing learning as security threats and technology continue to evolve.
Preferred Qualifications
Experience securing and operating cloud-based artificial intelligence tools and platforms, including coding assistants, agent runtimes, and integration protocols.
Working knowledge of securing two additional major cloud environments, including cloud key management, cloud identity and access management, virtual networking controls, and secure connectivity between cloud platforms.
Experience designing secure identity and connectivity across cloud and data platforms.
Strong experience with DevOps practices and automated delivery pipelines.
Experience incorporating static and dynamic analysis, dependency scanning, and secrets scanning into automated delivery pipelines.
Experience with enterprise source-code management and automated pipeline platforms.
Security certifications such as CISSP, CCSP, or GIAC.
A cloud security or cloud architecture certification is strongly preferred.
Additional certifications related to cloud security or enterprise data platforms are a plus.
Why This Opportunity May Be Appealing
Serve as a trusted cloud security advisor across a global technology organization.
Influence secure architecture, platform standards, and reference patterns across multiple cloud and data environments.
Work at the intersection of cloud security, container security, DevOps, data platforms, and artificial intelligence.
Partner with a broad range of engineering, operations, data, networking, and security professionals.
Apply hands-on technical expertise while shaping security controls, automation, and practical guidance.
Help establish secure-by-default practices and improve how security is integrated into cloud platforms and delivery pipelines.
Continue developing expertise as cloud platforms, security threats, tooling, and artificial intelligence-enabled development evolve.
Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.
Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals. To learn more, please visit https://dexian.com/.
Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.
